CVE-2023-6962 WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
Unauthenticated attackers can access sensitive information from meta descriptions of password-protected posts in the WP Meta SEO plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-6962?
CVE-2023-6962 is a medium-severity vulnerability in joomunited WP Meta SEO, published on 2 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.12 via the meta description. This makes it possible for unauthenticated attackers to disclose potentially sensitive information via the meta description of password-protected posts.
Which versions are affected by CVE-2023-6962?
It affects 1 product.
Products include Joomunited Wp Meta Seo.
How do I fix CVE-2023-6962?
No fix has been published for CVE-2023-6962 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-6962 being exploited?
There is no known exploitation of CVE-2023-6962 in the wild and no public exploit code.
Other vulnerabilities in joomunited WP Meta SEO
- CVE-2023-1381 WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
- CVE-2023-0875 WP Meta SEO < 4.5.3 - Subscriber+ SQLi
- CVE-2023-6961 WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header
- CVE-2024-45456 WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-0876 WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
Sources
Also known as GHSA-qrcv-jf73-5vrq.